Syllaro Academy

AWS Certified CloudOps Engineer - Associate

Resource Sharing with AWS RAM

Sharing one resource with many accounts instead of duplicating it: resource shares and managed permissions, the two-layer permission model, invitations and organization sharing, and the ownership split inside a shared VPC subnet.

Intermediate 28 minutes 6 Learning Objectives
  1. Explain what a resource share contains and why the owning account keeps ownership
  2. Enable sharing with AWS Organizations correctly and describe when invitations are required
  3. Describe the two-layer permission model of managed permissions plus consumer IAM policies
  4. Identify which resource types can be shared outside an organization and which cannot
  5. Divide responsibilities correctly between a VPC owner and a participant in a shared subnet
  6. Use Availability Zone IDs to place resources consistently across accounts